Openclaw Switch

Manage multi-provider model switching and fallback chains in OpenClaw. "OpenClaw Switch" helps users set up automatic model failover (e.g. 429 rate-limit → f...

This bundle appears to be what it claims: a local tool that reads and updates your ~/.openclaw/openclaw.json (or $OPENCLAW_CONFIG) to change the primary model and show fallbacks. Before installing or running: (1) back up your openclaw.json so you can restore it if needed; (2) review/verify the script (it’s short and readable) to confirm you’re comfortable with it writing your config and optionally restarting the OpenClaw daemon; (3) confirm any 'openclaw' executable on your system is trusted because the script will call it to restart the daemon if present. A minor note: the README's clone URL and the script header comment reference different GitHub paths—this is suspiciously sloppy but does not change the script's local-only behavior. If you need extra assurance, run the commands in a safe/non-production environment first.

Type: OpenClaw Skill Name: openclaw-switch Version: 1.0.0 The `set_primary` function in `scripts/openclaw-switch.sh` is vulnerable to Python code injection. The model ID, which is used as input to this function, is directly interpolated into a Python string without proper sanitization. This creates a second-order code injection vulnerability: if the `openclaw.json` file contains a maliciously crafted model ID (e.g., `model-1'; import os; os.system('echo pwned') #`), selecting this model via the `switch` command would execute arbitrary Python code. While the script itself does not exhibit malicious intent, this vulnerability could lead to Remote Code Execution if the configuration file is compromised or contains untrusted entries.